/etc/cron.d/certbot cron file should be absent when manage_cron is set to true on Debian about puppet-letsencrypt

[ekohl]

It's a valid point. On Debian (and likely Debian-based) there is indeed a default cronjob (and systemd timer) but there isn't on RH(-based).

[bastelfreak]

@hostingnuggets could you provide a PR for this?

[hostingnuggets]

@bastelfreak yes that should be an easy one. Just about the rspec test I am not sure if it would work because in order to test that the default package certbot cron file is present/absent I need the certbot package to be installed. Or do you have an idea what test would make sense?

[ekohl]

I'd guess a $letsencrypt::manage_cron_per_cert parameter makes sense. Determine the default true/false (probably always true except Debian). Then the define uses that value as a default.

[hostingnuggets]

I see so a new test in letsencrypt_certonly_spec.rb would be required where I define the manage_cron_per_cert in params to its default (true) and then what should be used as expect? Should it just be compile.with_all_deps ?

[vchepkov]

On related note, on RHEL7 systems supplied timer should be disabled when cron is managed.

  systemd::unit_file { 'certbot-renew.timer':
    target => '/dev/null',
  }

[bastelfreak]

@vchepkov can you provide a PR for this?

[OlegPS]

And for Debian 11 (certbot 1.12.0-2) we should disable systemd certbot.timer